Datasheet

Ivanti Security Controls
Patch for Windows and LinuxWith IT teams spending too much time managing
security device sprawl, and Security teams
suffering a labor shortage, Ivanti simplifies
security with a unified solution that targets

Ivanti Security Controls is a single automated patchingsolution that spans not only physical and virtual Windows
servers but workstations as well. And we’ve added Red
Hat Enterprise Linux and CentOS patch support to theyour biggest attack vectors. In Ivanti Security

leading Windows patching solution on the market.

Controls (formerly Ivanti Patch for Windows)Patch your virtual servers

we’ve brought together the security tools
global experts agree create the highest
barriers to modern cyber attacks—discoveryof the authorized and unauthorized software
in your environment, so you can protect anddefend against it; patch management foryour heterogeneous OS and third-party app
environment; dynamic whitelisting; and granularprivilege management—as well as additional
patch tools that help IT and Security work
together better to better protect the business.

ivanti.com

Find online and offline workstations and servers, scan
for missing patches, and deploy them. Then patch

everything from the OS and apps to virtual machines(VMs) and even the ESXi hypervisor with theproduct’s deep integration with VMware. It’s possible
to keep even offline virtual images in a constantstate of readiness to be deployed. (You don’t want
to go through the two-step process of creating a VM
and having to patch it. If offline templates are kept
current all the time, you can deploy a VM without
having to worry about whether it’s up to date.)

Patch without an agent
Agentless technology lets you assess and deploy
patches to the workstations and servers connected
to your network while minimizing the impact on bothyour team and system workloads. Alternatively, you
can use the agent to create as many different agent
policies as necessary to manage your network,
offering significant patching flexibility, and to provide
a higher degree of patch accuracy in environments
where devices are not continuously connected to
the network. Assign different agent configurations todifferent devices in your organization.

Patch your Windows and Linux machines
You need patch management software in your toolbox
that can handle today’s heterogenous environments.
Extending patching beyond Windows is a must. And
doing this efficiently, using a single interface andautomated tool, not only frees up IT, but also reduces
human error while enhancing your defenses.

Patch your applications
Third-party applications such as Adobe Acrobat
Flash and Reader, Google Chrome, Mozilla Firefox,
and Oracle Java are the apps and browser add-ons
hackers target most.
We provide the largest patch catalog in the industry,and our content team puts all the patches througha gauntlet of testing, so you don’t have to take thaton yourselves. We can save you and your team time
better used to focus on core business goals.

Whitelisting and Privilege
Management Done Rightas well, like the ability to start or stop services andIvanti Security Controls offers a more dynamic

There are still companies that can enforce a policy

whitelisting option as well, using trust models inof total lockdown of user permissions, but generally

place of lists, which reduces the ramp-up, cost ofusers require some ability that inevitably requires

ownership once running, and performance impact,

us to grant them administrative privileges onwhile still delivering a high degree of security. It also

their system. Microsoft provides just two levels oflets IT take back admin rights but still enable users tocontrol: user or a full admin. There’s some variation

do what they need to, including easing the process ofin between, but not enough to make it a goodadding additional permissions if needed.

experience for the user or administrator.

Simplify whitelisting

We implement Just Enough Administration (JEA) andWe can provide authorized access to applications,Just-in-Time Administration (JIT) – letting you takeservices, and components without making IT manage
extensive lists manually and without constraining
users. Trusted Ownership™, for example, allows
NTFS ownership of a file to simplify the process ofwhitelisting. Using a handful of trusted accounts
to define ownership of trusted files allows easy
implementation of a whitelist, and continuous addition
and update of applications through your management
systems, as the trusted owners are the accounts

install or remove software in error.

back your admin rights but still enable users to dowhat they need to, including easing the process of
escalating or adding additional permissions if needed.
Now you can choose. Take a full admin back down
to a regular user, and provide escalation of privileges
where and when needed, from access to install
applications, install a printer, use PowerShell,or whatever the user may need, but nothing morethan what the user should have. Or you can take that

performing the install and update\upgrade efforts.

full administrator and strip away the things theyControl the keys to the kingdom

for example, or access to specific capabilities.

should not have access to. Take PowerShell away,

There are many vulnerabilities that, if exploited, give

Limit administrative privilege to specific consoles,

the attacker permissions equal to the current user.

applications, services, and commands, reducing

Attackers can use stolen credentials and that user’s

the risk of admins introducing malware, halting

admin rights to gain full access to information andessential services, or affecting performance ofsystems and spread further into your network. And

mission-critical services.

providing full admin rights on a server has other risks

Ivanti Security Controls | Datasheet

2More Tools to Save You Timeand Money
Ivanti Security Controls also includes the following
features that make it even easier for Securityand IT Ops to undertake the business of securing
your organization.

Bridge the gap between Security and IT Ops
with CVE to patch list creation
Ivanti Security Controls can take a vulnerability
assessment from whatever vendor the organization
is using, find all the patches that relate to thoseivanti.com

Common Vulnerabilities and Exposures (CVEs), and1 800 982 2130

build a patch group of updates that can be quickly

sales@ivanti.com

Integrate and automate beyond Ivanti

approved for remediation in the environment. It’s aPatch REST APIs enable Security Controls tohuge time-saver replacing today’s manual process.

integrate with other products, automate sharedprocesses, and provide remote access and controlof the console.

Copyright © 2021, Ivanti. All rights reserved. IVI-2264 03/21 SP